2026 - Security Ticks

Cisco FMC static credentials exploited by attackers (CVE-2026-20316)

CISA, Cisco, configuration management, Don't miss, Hot stuff, News, vulnerability / SecurityTicks

Cisco FMC static credentials exploited by attackers (CVE-2026-20316) 2026-07-30 at 13:44 By Zeljka Zorz A static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged by attackers, CISA warned. Two FMC flaws, one indicator of compromise CVE-2026-20316, reported […]

Cisco FMC static credentials exploited by attackers (CVE-2026-20316) Read More »

Dropzone AI turns threat hunting into a routine SOC operation

Dropzone AI, Industry news / SecurityTicks

Dropzone AI turns threat hunting into a routine SOC operation 2026-07-30 at 13:43 By Industry News Dropzone AI has announced the general availability of AI Threat Hunter, its proactive threat hunting agent. The tool enables security teams to run structured hunt packs across their environments to identify hidden threats, emerging risks, and security coverage gaps

Dropzone AI turns threat hunting into a routine SOC operation Read More »

PortSwigger introduces Burp AT for agentic AI security testing

Industry news, PortSwigger / SecurityTicks

PortSwigger introduces Burp AT for agentic AI security testing 2026-07-30 at 13:33 By Industry News PortSwigger has announced the public beta of Burp AT, a new addition to Burp Suite that brings agentic AI to professional penetration testing. Burp AT enables penetration testers to delegate defined investigative tasks to AI agents that use Burp Suite’s

PortSwigger introduces Burp AT for agentic AI security testing Read More »

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

Uncategorized / SecurityTicks

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts 2026-07-30 at 13:33 By South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A compromised

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts Read More »

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

Uncategorized / SecurityTicks

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT 2026-07-30 at 13:32 By The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (aka Winos 4.0) for

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT Read More »

Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms

AI, Artificial Intelligence, Ruflo, RufRoot, Vulnerabilities, vulnerability / SecurityTicks

Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms 2026-07-30 at 12:56 By Ionut Arghire Unauthenticated attackers could send HTTP requests to an exposed endpoint to execute commands inside the MCP bridge container. The post Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms Read More »

1 in 5 Data Center Assets Are Within Easy Reach of Attackers

Claroty, data center, ICS/OT, OT, report / SecurityTicks

1 in 5 Data Center Assets Are Within Easy Reach of Attackers 2026-07-30 at 12:28 By Eduard Kovacs Claroty has analyzed 750,000 cyber-physical systems across some of the world’s largest data center facilities. The post 1 in 5 Data Center Assets Are Within Easy Reach of Attackers appeared first on SecurityWeek. This article is an

1 in 5 Data Center Assets Are Within Easy Reach of Attackers Read More »

Don’t Ignore the Most Important System You Manage

Uncategorized / SecurityTicks

Don’t Ignore the Most Important System You Manage 2026-07-30 at 12:00 By Be sure to maintain the most critical piece of infrastructure: the human running it. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Don’t Ignore the Most Important System You Manage Read More »

Coordinated cyberattack hits more than 30 Minnesota water utilities

CISA, critical infrastructure, cyber resilience, cyberattack, News, Tenable, USA / SecurityTicks

Coordinated cyberattack hits more than 30 Minnesota water utilities 2026-07-30 at 11:59 By Sinisa Markovic A coordinated cyberattack on July 26 and 27 hit operational technology (OT) systems at more than 30 community water utilities across Minnesota, prompting an immediate response from Minnesota IT Services (MNIT) to contain the threat. MNIT confirmed the attack in

Coordinated cyberattack hits more than 30 Minnesota water utilities Read More »

Australia sues Telegram over alleged failures to remove terror content

Chinese newspaper warns of Bitcoin extortion scam using its name

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

Uncategorized / SecurityTicks

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks 2026-07-30 at 11:47 By The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US.

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks Read More »

US and Allies Update SBOM Guidance

Application Security, Government, Government Policy, guidance, SBOM / SecurityTicks

US and Allies Update SBOM Guidance 2026-07-30 at 11:21 By Ionut Arghire Five years after the initial release, the refresh introduces new elements, removes others, and updates terminology. The post US and Allies Update SBOM Guidance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

US and Allies Update SBOM Guidance Read More »

Chrome 151 Patches 370 Vulnerabilities

Chrome, patches, Vulnerabilities, vulnerability / SecurityTicks

Chrome 151 Patches 370 Vulnerabilities 2026-07-30 at 10:51 By Ionut Arghire The major browser update resolves roughly 80 critical- and high-severity security defects. The post Chrome 151 Patches 370 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome 151 Patches 370 Vulnerabilities Read More »

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

Uncategorized / SecurityTicks

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation 2026-07-30 at 10:40 By The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation Read More »

Bitcoin ETF inflows return as Ether funds slip into outflows

markets / SecurityTicks

Bitcoin ETF inflows return as Ether funds slip into outflows 2026-07-30 at 10:05 By Cointelegraph by Helen Partz US spot Bitcoin ETFs recorded $32.1 million in inflows on Wednesday despite Bitcoin dipping below $64,000, ending a four-session outflow streak. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin ETF inflows return as Ether funds slip into outflows Read More »

Smartphone Access Control Scores High Marks on Campus

Uncategorized / SecurityTicks

Smartphone Access Control Scores High Marks on Campus 2026-07-30 at 10:00 By The case for using smartphones for mobile electronic access control (EAC) credentialing. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Smartphone Access Control Scores High Marks on Campus Read More »

Cisco Secure FMC Zero-Day Exploited in the Wild

Cisco, exploited, FMC, Vulnerabilities, vulnerability, Zero-Day / SecurityTicks

Cisco Secure FMC Zero-Day Exploited in the Wild 2026-07-30 at 09:31 By Eduard Kovacs The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices. The post Cisco Secure FMC Zero-Day Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Cisco Secure FMC Zero-Day Exploited in the Wild Read More »

Data breach cost 2026 averaged $4.99 million, AI attacks ran higher

agentic AI, AI, CISO, cyber risk, cybersecurity, data breach, Don't miss, Hot stuff, IBM, News, report / SecurityTicks

Data breach cost 2026 averaged $4.99 million, AI attacks ran higher 2026-07-30 at 09:15 By Mirko Zorz More than one in four organizations hit by a malicious attack over the past year say AI drove it. Those breaches averaged about $1 million above the malicious attacks that ran without AI. Defenders bought similar technology and

Data breach cost 2026 averaged $4.99 million, AI attacks ran higher Read More »

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Uncategorized / SecurityTicks

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet 2026-07-30 at 09:05 By Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet Read More »